GDPR Policy (UK)

This GDPR Policy outlines how South Asian Heritage Trust (referred to as "we", "us" or "our") collects, uses, stores and protects personal data in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws applicable in the United Kingdom.

This policy applies to the personal data we collect from users (referred to as "you" or "your") of the website southasianheritage.org.uk and any related services.

When you contact us through our website or by email using the domain southasianheritage.org.uk, we will collect certain information from you, including your email address, name and the reason for contacting us. We do this in order to maintain a record of our communication whilst adding communication details to our database.

You may be added to a database of important contacts for media information such as newsletters or updates. You have the right to unsubscribe at any time using the unsubscribe option in the first communication you receive.

By providing us with your contact information and engaging in communication with us, you consent to our collection and storage of your personal data in accordance with UK GDPR and other applicable data protection laws.

South Asian Heritage Trust acts as the data controller and is responsible for the processing of personal data collected through the website.

South Asian Heritage Trust
Email: info@southasianheritage.org.uk

We may collect and process the following types of personal data:

• Contact information, including your name, email address, phone number and postal address
• Event details, if you submit an event through the website, including event name, date, location and description
• Communication data, including any correspondence between you and us via email, contact forms or other means
• Website usage data, including information about how you use and navigate our website, IP address, browser type and technical details collected through cookies or similar technologies

We process personal data for the following purposes:

• Performance of a contract: To fulfil our obligations when you submit an event or engage in other activities on our website
• Legitimate interests: To improve our services, understand user preferences, manage and promote events, and respond to inquiries
• Consent: Where you have explicitly consented, such as when subscribing to our newsletter

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. The criteria used to determine the retention period include the nature of the personal data, the purposes for processing, any contractual obligations, and legal or regulatory requirements.

We implement appropriate technical and organisational measures to ensure the security of your personal data and protect it against unauthorised access, loss, misuse or alteration. We regularly review and update our security measures to maintain the integrity and confidentiality of personal data.

We may share your personal data with trusted third parties who assist us in providing our services or support our operations, such as event partners, service providers, or legal and regulatory authorities as required by law.

We take steps to ensure that any third parties who process personal data on our behalf comply with the relevant data protection laws and maintain appropriate security measures.

Access to Shared Drive: Requests to access our shared drive may result in your email address being visible to others who have access to that drive. By requesting access to any stored files, you agree to this visibility. South Asian Heritage Trust is not responsible for the visibility of your email address in this context.

You have the following rights regarding your personal data under the UK GDPR:

• Right to access: You can request access to the personal data we hold about you
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data
• Right to erasure: You can request the deletion of your personal data under certain circumstances
• Right to restrict processing: You have the right to request the limitation of processing in certain situations
• Right to data portability: You can request the transfer of your personal data to another organisation in a structured, commonly used and machine-readable format
• Right to object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes

Our website may use cookies and similar tracking technologies to enhance your browsing experience, analyse website usage and personalise content. By using our website, you consent to the use of such cookies and tracking technologies. You can manage your cookie preferences through your browser settings or opt out of certain tracking technologies where applicable.

We reserve the right to update or modify this GDPR Policy from time to time to reflect changes in our data processing practices, legal requirements or other operational reasons. We will provide notice of any significant changes on our website or through other appropriate communication channels.